B2B Identity Management

Securing Pipes This is the easy part of B2B identity

Managing Identity is Getting Harder Increasing automation demand Partner On-boarding requirements increasing Increasing demands for compliance reporting Protocol complexity growing Increasing focus on security and governance

Increasing automation demand

Partner On-boarding requirements increasing

Increasing demands for compliance reporting

Protocol complexity growing

Increasing focus on security and governance

<company>Big Corporation</company> mutually defined Duns number ZZ 01 07 ISA GS una unb https://sub.domain.com IP Address

Identity, Access and Security Companies Divisions Geographies Locations People Admins Users Management Products Genealogy Chain of Custody

Companies

Divisions

Geographies

Locations

People

Admins

Users

Management

Products

Genealogy

Chain of Custody

Questions to Ask Who can represent a company? Who represents the buyer and seller? How to manage in transit and customs identity needs? Who validates that any given document is valid? Who can change routing information? How to manage a singe ID on multiple networks? Who defines ID’s?

Who can represent a company?

Who represents the buyer and seller?

How to manage in transit and customs identity needs?

Who validates that any given document is valid?

Who can change routing information?

How to manage a singe ID on multiple networks?

Who defines ID’s?

e-Invoicing in Europe is about identity and security EU Council Directive on e-Invoicing (2006/112/EC, November 2006) Ratified by all EU countries Paper and electronic invoices are possible Third Parties can act for sender and receiver Electronic Invoices can be sent by: EDI (1994/820/EU) Digitally signed document (1999/93/EU) Other means (to be defined by the EU-member state) Country-specific requirements: Archiving Electronic Signature Service Provider First Mile Connection The EU broadened e-Invoicing support by implementing EU Council Directive on e-Invoicing (since 2004)

EU Council Directive on e-Invoicing (2006/112/EC, November 2006)

Ratified by all EU countries

Paper and electronic invoices are possible

Third Parties can act for sender and receiver

Electronic Invoices can be sent by:

EDI (1994/820/EU)

Digitally signed document (1999/93/EU)

Other means (to be defined by the EU-member state)

Country-specific requirements:

Archiving

Electronic Signature

Service Provider

First Mile Connection

opportunity is beyond the network

Access and Controls The right systems, the right platforms, the people and the right partners

Data is everywhere Identity is embedded in the data

Identity is part of EVERY B2B Layer Digital certificates SSH (secure shell) PGP SMTP HTTP/s FTP/s NAESB Event-driven Scheduled Leased line VPN Binary User-defined SSL, TLS/SLL S/MIME IPSEC Proxy Servers (HTTP, FTP) Security Flexible Communication Capabilities AS1, AS2, AS3 ebXML JMS/MQ Web Services EBMX Transport Real-time Store-and-forward mailbox Delivery Internet Frame relay Connectivity EDI XML Text Data Formats

Digital certificates

SSH (secure shell)

PGP

SMTP

HTTP/s

FTP/s

NAESB

Event-driven

Scheduled

Leased line

VPN

Binary

User-defined

SSL, TLS/SLL

S/MIME

IPSEC

Proxy Servers (HTTP, FTP)

AS1, AS2, AS3

ebXML

JMS/MQ

Web Services

EBMX

Real-time

Store-and-forward mailbox

Internet

Frame relay

EDI

XML

Text

What is the cure? Collaborative Standards Development